#1Cross-platform tools and methodologies for comprehensive security testing of mobile applications.
Kitploit recommended
codinggay/blackdexAndroid APK unpacker that dumps DEX files from running or installed apps on Android 5.0–12 without root, Xposed, or Frida, supporting deep unpacking…
blacktop/ipswiOS/macOS Research Swiss Army Knife
rednaga/apkidAndroid Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
saeidshirazi/awesome-android-securityA curated list of Android Security materials and resources For Pentesters and Bug Hunters
dwisiswant0/apkleaksScanning APK file for URIs, endpoints & secrets.
reverseclabs/drozerThe Leading Security Assessment Framework for Android.
charles2gan/gda-android-reversing-toolthe fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which…
httptoolkit/frida-interception-and-unpinningFrida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
auroraoss/aurorastoreOpen-source Android client for browsing and downloading apps from Google Play with anonymous login, device/locale spoofing, and tracker detection.
mg1937/ascFast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…
niklashigi/apk-mitm🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
vmoranv/jshookmcpA search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.
grapheneos/vanadiumPrivacy and security hardened Chromium build providing the WebView and default browser for GrapheneOS, with OS-level hardening and compatibility…
ev-flow/quark-engineRule-based Android malware scoring engine that analyzes APKs using static and dynamic analysis to detect vulnerabilities, identify malware families,…
m0bilesecurity/rms-runtime-mobile-securityRuntime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
nabla-c0d3/ssl-kill-switch2Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
ac-pm/inspeckageAndroid Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
nowsecure/r2fridaRadare2 and Frida better together.
